General
- Target 2026-08-10_5196f61b91f822c4ffa4a4b7bedc48ad_amadey_cobalt-strike_coinminer_cryptbot_elex_glassworm_poet-rat
- Size 10.0MB
- Sample260811-brb1waysgx
- SHA256 bbf21fc0cc695a057bb2b0d42349d8c74c1c80e2eb27dfbf1bdafebbce7d834b
- MD5 5196f61b91f822c4ffa4a4b7bedc48ad
- SHA1 3c9a45f73d091ec7fc6466089d8bd84dd2c9f82b
- SHA512 11345742f6fc2901d113bee4d966d2dcb4d7f73e88c2f0120b409935028ae5a72d822757d24b74acf9f73ed9850a80f5af085e424420f6cc86e71a8bf6708d2a
- SSDEEP 49152:U+ES+E2+ES+EhXp66+ES+E2+ES+EhXp66+ES+E2+ES+EhXp66+ES+E2+ES+EhXpr:h/fh6ImzzJoDfuBcMv+A73XAm
- TLSH T18CB66C01FAC744B5E923017048AB92BF9231BD158B31CADBE748AB5BE933BD15D35326
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-10_5196f61b91f822c4ffa4a4b7bedc48ad_amadey_cobalt-strike_coinminer_cryptbot_elex_glassworm_poet-rat.exe
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-10_5196f61b91f822c4ffa4a4b7bedc48ad_amadey_cobalt-strike_coinminer_cryptbot_elex_glassworm_poet-rat.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-10_5196f61b91f822c4ffa4a4b7bedc48ad_amadey_cobalt-strike_coinminer_cryptbot_elex_glassworm_poet-rat
- Size 10.0MB
- SHA256 bbf21fc0cc695a057bb2b0d42349d8c74c1c80e2eb27dfbf1bdafebbce7d834b
- MD5 5196f61b91f822c4ffa4a4b7bedc48ad
- SHA1 3c9a45f73d091ec7fc6466089d8bd84dd2c9f82b
- SHA512 11345742f6fc2901d113bee4d966d2dcb4d7f73e88c2f0120b409935028ae5a72d822757d24b74acf9f73ed9850a80f5af085e424420f6cc86e71a8bf6708d2a
- SSDEEP 49152:U+ES+E2+ES+EhXp66+ES+E2+ES+EhXp66+ES+E2+ES+EhXp66+ES+E2+ES+EhXpr:h/fh6ImzzJoDfuBcMv+A73XAm
- TLSH T18CB66C01FAC744B5E923017048AB92BF9231BD158B31CADBE748AB5BE933BD15D35326
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Creates new service(s)
-
Executes dropped EXE
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Execution
Command and Scripting Interpreter
1Windows Command Shell
1Scheduled Task/Job
1Scheduled Task
1System Services
1Service Execution
1Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Create or Modify System Process
1Windows Service
1Scheduled Task/Job
1Scheduled Task
1